How statement and proof provenance work
The first chip identifies the source of the statement or construction; the second identifies the source of its local proof or verification.
- Literature-sourced: the exact statement appears in a cited source; only wording and notation differ.
- AI-adapted: a semantically identical restatement of literature-sourced material, modulo indexing, notation, and boundary cases adopted by the library.
- AI-generated: a genuinely novel statement formulated by AI, with no source for the claim itself.
These labels describe origin, not correctness: citations and verification chips remain separate evidence.
Adaptive ODE solvers and error estimation
1 · Prerequisites
- Absolute and Conditional Convergence; Rearrangement; Products
- Absolute Continuity and the Sharp Fundamental Theorem of Calculus
- Areas of Elementary Plane Figures
- Banach-Space Differential Calculus and Banach Manifolds
- Binary Operations, Monoids, Groups and Subgroups
- Bounded Linear Operators and Quotient Spaces
- Bounded Variation and the Riemann–Stieltjes Integral
- Compactness
- Compactness in Metric Spaces
- Completeness, Completion, and Uniform Continuity
- Complex Norms and Realification
- Complexification, Realification and Real Structures
- Connectedness
- Construction of the Natural Numbers
- Construction of the Real Numbers via Cauchy Sequences
- Construction of the Real Numbers via Dedekind Cuts
- Continuity, IVT, EVT, and Uniform Continuity
- Cosets, Index and Lagrange's Theorem
- Countability and Uncountability
- Darboux, L'Hôpital, and Taylor's Theorem
- Density Separability and Convolution in Lᵖ
- Differentiation of Monotone Functions and the Vitali Covering Theorem
- Divisibility, Euclidean Domains, Principal Ideal Domains and Unique Factorisation
- Filters and Ultrafilters
- Finite Counting, Factorials and Binomial Coefficients
- Finite Probability and the Probabilistic Method
- Foundations of the Real Numbers for Analysis
- Fubini and Change of Variables
- Global ODE and Log-density Integration Error
- Ideals, Quotient Rings and the Isomorphism Theorems for Rings
- Lebesgue Measure on Euclidean Space
- Limits of Real Functions
- limsup, liminf, and Subsequential Limits
- Linear Independence, Bases and Dimension
- Linear Transformations, Rank-Nullity and Quotient Spaces
- Matrices, the Matrix of a Linear Map, and Change of Basis
- Measurable Functions and Simple Approximation
- Measures and Their Basic Properties
- Metric Spaces
- Mixed Partials, Taylor Formulae, and Extrema
- Monotone Functions, Discontinuities, and Continuity Sets
- Monotone Sequences, Bolzano-Weierstrass, and Cauchy Completeness
- Normal Subgroups and Quotient Groups
- Normed and Banach Spaces
- One-step ODE Consistency and Local Error
- Order, Zorn's Lemma, and the Axiom of Choice
- Outer Measure and the Caratheodory Extension Theorem
- Outward rounded interval and ball arithmetic
- Picard-Lindelöf and First-Order Ordinary Differential Equations
- Pointwise Extended-Real Function Products
- Polynomial Rings, the Division Algorithm and Roots
- Power Series and Real-Analytic Functions
- Properties of the Integral and the Working FTC
- Relations, Functions, and Quotients
- Rings, Subrings, Integral Domains and Fields
- Rⁿ as a Normed Space; Vector-Valued Functions
- Roots, Rational Powers, and Classical Inequalities
- Runge–Kutta Methods and Order
- Separation Axioms: the Hierarchy
- Sequences and Limits
- Sequences and Series of Functions; Uniform Convergence
- Series: Convergence and the Nonnegative Tests
- Sigma Algebras and Borel Sets
- Signed and Complex Measures Hahn and Jordan
- Simple Field Extensions and the Construction of the Complex Numbers
- Subspaces, Products, and Quotients
- Suprema and Infima
- The Cantor Set, Baire Category, and Measure Zero in ℝ
- The Derivative and the Mean Value Theorems
- The Exponential Function
- The Lebesgue Integral and the Convergence Theorems
- The Logarithm and General Powers
- The Lᵖ Spaces Holder Minkowski and Riesz Fischer
- The Maximal Function and Lebesgue Differentiation
- The Radon Nikodym Theorem and Lebesgue Decomposition
- The Riemann Integral in Rᵐ and Jordan Content
- The Riemann Integral: Definition and Integrability
- The Topology of Euclidean Space
- The Total Derivative in ℝᵐ → ℝⁿ
- The ZFC Axioms and the Basic Set Constructions
- Topological Spaces and Continuity
- Topology of ℝ
- Triangularisation, Generalised Eigenspaces and Jordan Canonical Form
- Vector Spaces, Linear Subspaces, Span and Direct Sums
2 · Summary
Summary
An embedded explicit Runge–Kutta pair shares stages and reports the difference between its high and low outputs. The difference estimates the lower-order local defect only asymptotically when its leading coefficient is nonzero; it is used as a heuristic by a fully specified accept/reject controller with norm scaling, safety factor, step bounds, and a finite attempt budget. Neither an accepted step nor a completed controller run certifies global error or diagnoses stiffness. The generic fixed uniform-mesh global-error theorem has a distinct mesh and exact-defect premise.
For the Euler–Heun pair, the page derives both local defects and constructs a quadratic dense output with its own uniform within-step error. It also states the continuous-residual a posteriori error estimate. A separate choice-free proof covers piecewise- reconstructions, and a bounded residual plus one-sided Lipschitz estimate yields the integrating-factor bound.
The validated branch is intentionally finite and narrow: it checks rational ODE expression DAGs, dyadic polynomial reconstructions, interval enclosures, residuals, Jacobian bounds, and a strict radius supersolution. Its soundness argument accounts for the actual stored reconstruction, including interpolation or stage error represented in its coefficients. Unsupported operations or failed inclusions return inconclusive; no embedded difference is treated as a residual certificate.
3 · Logical flowchart
4 · Definitions, theorems and proofs
A maximal ODE solution cannot remain in a compact tube to a finite endpoint
Statement
Let and be open, and let be continuous and locally Lipschitz in the state variable. There is no maximal solution of whose interval has a finite right endpoint and for which some , , and compact set satisfy for every . The compact tube condition supplies boundedness of along the graph and a limit point inside the open domain.
Facts & Assumptions
Given: The ODE, maximal solution, finite endpoint , and compact tube in the Statement.
First-order systems, initial value problems, and solutions on intervals: a solution is differentiable on its interval, remains in , and satisfies .
Extensions, maximal solutions, maximal intervals, and global solutions: maximality means that no solution on a strictly larger interval restricts to .
A continuous real-valued function on a nonempty compact metric space is bounded and attains a greatest and a least value: a continuous real-valued function on a nonempty compact metric space is bounded.
The mean value theorem, as the case of Cauchy's: for continuous on with and differentiable on there is with : a scalar function continuous on a closed interval and differentiable on its interior has a point where its derivative equals the interval's average rate of change; in particular, if the derivative is bounded in absolute value by , the function is -Lipschitz.
The reals are complete: every Cauchy sequence of real numbers converges to a real number.
Picard-Lindelöf local existence and uniqueness for first-order systems: for continuous locally state-Lipschitz on an open domain, an initial point in the domain has a local solution through it.
Locally unique ODE solutions agree on overlaps and glue across a common endpoint: solutions through a common endpoint agree where they overlap and their adjacent pieces glue to a solution.
Proof
For each coordinate , compactness of and [F3] give a finite bound for on . Put . For in , [F1] gives for every ; [F4] yields . Summing coordinate differences shows .
Choose the explicit sequence . It increases to , and [F1] and step 1.1 make each coordinate of Cauchy. By [F5] each coordinate has a limit; call the resulting vector . The same Lipschitz estimate in step 1.1 implies as . Thus in Euclidean space. Since every term lies in , [F6] gives .
By [F7] there is a local solution through . If , continuity of the solution at its endpoint gives ; if , define the endpoint value . For each coordinate and each sufficiently close to , the real mean value theorem [F4] applied to this continuous extension on gives a point with . Continuity of and makes this quotient tend to as . Hence the left derivative at equals , which is also the right derivative of .
The endpoint extension and agree at , and [F8] glues the original solution, its endpoint value, and into a solution on a strictly larger interval. This contradicts [F2], proving that no maximal solution can satisfy the stated finite-endpoint compact-tube conditions.
A posteriori ODE error bound from the continuous residual
Statement
Assume the Axioms of Countable Choice and Dependent Choice. Let and , let be open, let be continuous, and let be an exact solution of whose graph lies in . Let be componentwise absolutely continuous with graph in . Suppose , almost everywhere, and, for almost every , the points satisfy
Define wherever exists, and assume almost everywhere. Then, for every ,
The bound is a posteriori: it uses the residual of the actual reconstruction. An embedded Runge–Kutta difference alone does not supply the hypothesis .
Facts & Assumptions
Given: The domain, exact solution, reconstruction, integrable coefficient and residual bound in the Statement, and Countable Choice plus Dependent Choice.
The Axiom of Countable Choice () and The axiom of dependent choice: a relation in which every element is related to something admits an -indexed chain: the proof assumes both axioms only when applying the library's fundamental theorem for absolutely continuous functions.
For almost every , .
satisfies almost everywhere, with and almost everywhere.
The class of integrable functions and Integrable real and complex functions, and their integrals: means that is measurable and ; the measure is Lebesgue measure restricted to .
Absolute continuity on a compact interval: absolute continuity on is the finite disjoint-interval increment condition.
First-order systems, initial value problems, and solutions on intervals: a solution remains in the open time-state domain and satisfies .
Fundamental theorem of calculus for absolutely continuous functions: under Countable Choice and Dependent Choice, an absolutely continuous real function has integrable derivative almost everywhere and equals its initial value plus the integral of that derivative.
Cauchy-Schwarz with its equality case, the triangle inequality for , the parallelogram law and polarisation: the Euclidean norm satisfies the triangle inequality and .
The indefinite integral of an function is absolutely continuous and The indefinite integral of an function is differentiable almost everywhere: if , then its indefinite integral is absolutely continuous and has derivative almost everywhere.
A Lipschitz function after an absolutely continuous function is absolutely continuous and The product of two absolutely continuous functions is absolutely continuous: Lipschitz composition and products preserve absolute continuity.
The chain rule, in one line from Carathéodory: if is differentiable at and is differentiable at , then is differentiable at with and Sums, scalar multiples, products and quotients: , , , and when : at points of differentiability, the ordinary chain and product rules hold.
The exponential function is smooth and and The exponential is positive and satisfies : the exponential has derivative itself and is strictly positive.
The mean value theorem, as the case of Cauchy's: for continuous on with and differentiable on there is with : a differentiable scalar function with derivative bounded in absolute value by on an interval is -Lipschitz there.
Monotonicity and nonnegative homogeneity of the nonnegative integral: the nonnegative Lebesgue integral is monotone and homogeneous for nonnegative finite scalars.
Arithmetic and lattice operations preserve measurability whenever they are defined: sums, scalar multiples, products and absolute values of measurable real-valued functions are measurable.
The Lebesgue integral is linear on and Two integrable functions are equal almost everywhere exactly when all of their indefinite integrals agree: the Lebesgue integral is linear on and is unchanged by almost-everywhere modification.
The Euclidean inner product on : , the form is bilinear and symmetric, and .
Proof
Put and . Each component is absolutely continuous by [F1]. Given , choose for each of the finitely many components a positive interval-length threshold that makes the sum of its increments less than ; the minimum of these finitely many thresholds works for all components at once. For any finite disjoint interval family with total length below that minimum, [F4] gives , so the total increments of are below . Thus is absolutely continuous by [F1].
By [F3], and each component of are differentiable almost everywhere; the finite intersection of these full-measure sets is still full measure. At such a point with , differentiating using [F14] gives , hence . Since , [A2], [A3], and [F4] imply . At a differentiability point where , the nonnegative function has a local minimum, so and the same inequality holds.
Define and . By [F5], is absolutely continuous and almost everywhere. [F10] and [F11] give , and on , so [F8] and [F9] make Lipschitz there. By [F6], and are absolutely continuous. At almost every point, [F7]–[F8] give .
The product is measurable by [F12], and almost everywhere. Since almost everywhere and , [F11] implies ; [L1] gives . By [F3], , so is in by [F13]. Step 3.1 says almost everywhere. Since almost everywhere, [F11] and give ; measurability follows from [F12], so [L1] gives . Thus almost everywhere; [F13] gives , and [F11] gives . Hence .
Apply [F3] to on , and use and from [F8]. Step 4.1 gives . Substituting the definition of gives the asserted bound.
Choice-free residual error bound for piecewise-C1 ODE reconstructions
Statement
Let and , let be open, let be continuous, and let be an exact solution of on . Let be continuous and on each member of a finite partition (continuously differentiable on each closed panel, with one-sided endpoint derivatives), with graph in . Let be continuous on each partition interval, with one-sided endpoint values, and suppose on every open panel Then for every , The proof uses only finite-piece ordinary calculus and no choice axiom. The general absolutely continuous case is treated separately.
Facts & Assumptions
Given: The exact solution, reconstruction, finite partition, nonnegative piecewise-continuous coefficient and residual envelope in the Statement.
First-order systems, initial value problems, and solutions on intervals: the exact solution is differentiable and satisfies .
Cauchy-Schwarz with its equality case, the triangle inequality for , the parallelogram law and polarisation: the Euclidean inner product satisfies Cauchy–Schwarz and its norm is nonnegative.
The chain rule, in one line from Carathéodory: if is differentiable at and is differentiable at , then is differentiable at with and Sums, scalar multiples, products and quotients: , , , and when : the chain and product rules apply to differentiable functions.
The exponential function is smooth and and The exponential is positive and satisfies : is positive and has derivative .
The first fundamental theorem: if is integrable on and continuous at , then ; in particular a continuous has as a primitive gives the derivative of the integral of a continuous function. The second fundamental theorem: if is differentiable on with and is integrable, then gives for , using one-sided endpoint derivatives.
Square roots exist: a unique with ; the positives are , Sums, scalar multiples, products and quotients: , , , and when , and Derivative of an inverse: if is continuous and injective on a nondegenerate interval and differentiable at with , then the inverse is differentiable at with ; and if then is not differentiable at : the positive square root on is the inverse of on and has derivative there.
The Euclidean inner product on : the Euclidean inner product is symmetric and bilinear, and .
Proof
On one open partition panel put , for , and . The functions are there, so [F3], [F6], and [F7] give . Since , the hypotheses and [F2] yield , using , , and .
Let and multiply the differential inequality by . On each panel, [F3]–[F5] give . Integrate on each full or partial panel and add the finitely many inequalities; continuity at the partition nodes cancels the intermediate endpoint terms. This gives .
Let . Since and , while the integral term is independent of , the inequality in step 2.1 passes to the limit. Replacing by gives the claimed estimate.
Embedded Runge–Kutta pair and difference estimator
Definition
For an ODE on states in with , two explicit Runge–Kutta weight vectors and are an embedded pair when they use the same explicit stage recursion but produce two one-step values The two methods are the high and low members when their local orders are respectively at least and , for an integer . Their embedded difference estimator is the nonnegative scalar with the Euclidean norm. This definition asserts only how the estimator is computed; its reliability as a bound for either local defect is a separate claim and is not part of the definition.
The stage recursion and the local defect sign convention are those of Explicit Runge–Kutta tableaus, stage maps, and failure status and One-step ODE methods, local defect, uniform order, and step stability.
Finite-budget adaptive Runge–Kutta controller
Definition
Inputs are an IVP in the sense of First-order systems, initial value problems, and solutions on intervals, on an open domain with initial data and requested interval , where and ; an initial proposal ; an embedded pair with low order as in Embedded Runge–Kutta pair and difference estimator; tolerances and ; safety ; scale bounds ; step bounds ; and a positive integer attempt budget .
Output. Return a record consisting of one of success, failure, minimum-step-rejected, or attempt-budget-exhausted, together with the accepted mesh . The mesh always contains the initial pair and every accepted endpoint; on success, and is the returned endpoint approximation. On any other status, is the accepted prefix and is the last accepted approximation.
Every maximum and minimum below is over a displayed nonempty finite list of real numbers; existence follows from Every nonempty finite set of reals has a maximum and a minimum.
Procedure. Initialize , , , and proposal . If , return success with . For each attempt index , perform exactly the following steps:
- Set . The last term permits a final clipped step shorter than . If before reaching , return
failurewith . - Evaluate the shared stages in tableau order, checking before each evaluation that its time-state input lies in . If a stage input is outside , its evaluation is undefined, or its value is nonfinite, return
failurewith . Compute both pair outputs; if either output or any arithmetic needed to compute them is undefined, fails, or is nonfinite in the rounded realization, returnfailurewith . - Define and , where is the high-order value and the low-order value. If any scale or operation fails or is nonfinite in the rounded realization, return
failurewith . If , first check ; if not, returnfailurewith . Otherwise accept: set , , and append to . If , reject and retain . - If the attempt was accepted and , return
successwith . Otherwise, if it was rejected and , returnminimum-step-rejectedwith . These terminal checks precede the budget check, so a final accepted step that reaches succeeds and a rejection at the minimum step reports that safeguard. - If , return
attempt-budget-exhaustedwith . Otherwise compute Set and continue to attempt . A failed or nonfinite rounded computation of or returnsfailurewith .
For , is the unique positive st root supplied by Existence and uniqueness of -th roots: a unique with . The exponent is a leading-error model for step selection; neither acceptance nor this controller is a global error certificate or a stiffness test.
The mathematical specification evaluates each displayed operation, including maximum, minimum, absolute value, and positive-root evaluation, exactly. A rounded implementation instead applies its fixed finite-format rounding rule to every stage, output, scale, and controller-factor arithmetic operation and uses the resulting stored high and low values in the displayed difference and acceptance test; nonfinite or failed operations return failure. The finite termination theorem applies to either realization when each attempt has finite work. The rounded realization has no a posteriori guarantee: a tolerance below its resolution can be accepted because both stored values coincide.
Euler–Heun embedded Runge–Kutta pair
Definition
For , take the shared explicit stages The Euler member is and the Heun explicit trapezoidal member is . Their embedded difference is . The local orders are proved separately. In Embedded Runge–Kutta pair and difference estimator notation, the common tableau has , , high weights and low weights .
A nonzero leading defect makes the embedded difference asymptotically match the low-order defect
Statement
Fix one initial value problem and initial state. Let be the low member's one-step defect and the high member's defect, using the same exact initial state and step start. Suppose, as , for a fixed vector . Here for a vector means a remainder whose Euclidean norm is at most for all sufficiently small positive . Then . If , the estimator satisfies . If , these hypotheses do not imply that this ratio tends to one or that the estimator is nonzero; the Euler–Heun pair on , , has ratio as computed below.
Facts & Assumptions
Given: The two outputs and Euclidean estimator in Embedded Runge–Kutta pair and difference estimator, with the two displayed defect expansions.
Cauchy-Schwarz with its equality case, the triangle inequality for , the parallelogram law and polarisation: the Euclidean norm is continuous and satisfies .
Euler–Heun embedded Runge–Kutta pair: Heun and Euler use the two shared stages and , with outputs and .
Proof
Subtracting the two defect identities cancels the common exact value: . Thus there is a vector remainder with , where is bounded for all sufficiently small positive .
By [F2], . If , the same argument gives ; dividing the two positive limits proves . If , the expansions give only and , with no lower bound. To verify that the ratio-one conclusion can fail for an actual embedded Runge–Kutta pair, use the Heun–Euler pair [F3] on , : , , , , and the exact endpoint is . Thus , the estimator is , and their norm ratio is , while the coefficient is zero. Conversely, for the zero field with zero initial state, both outputs and the estimator vanish identically, so no positive lower bound for the estimator follows either.
Quadratic continuous extension for Heun's method
Definition
For one Heun step from of size with stages as in Euler–Heun embedded Runge–Kutta pair, define its quadratic continuous extension for by It has and , the accepted Heun endpoint. It is a separate within-step approximation; its order is analyzed independently of the endpoint order.
Finite rational residual-tube certificate for an ODE trajectory
Definition
Fix a dimension , rational times , a rational initial vector , and an ODE field represented by a finite acyclic expression DAG with rational constants, time/state inputs, and only nodes. Its domain consists of points where every division is defined. Write for the matrix of partial derivatives with respect to the state coordinates. A finite rational residual-tube certificate consists of the following exact rational data:
- A finite partition . On each panel , a vector polynomial with dyadic (hence rational) coefficients, whose neighboring endpoint values agree exactly. These stored coefficients define the actual reconstruction, including any endpoint correction or rounded stage value used by an implementation.
- For each panel, a closed rational state box , rational bounds , , a rational , and a polynomial radius with rational coefficients. The radius polynomials agree at neighboring endpoints. For a panel's finite rational subdivision, the intended inequalities are , , and .
- A finite rational subdivision of every panel, with exact endpoint coverage, no gaps, and pairwise-disjoint interiors. It supplies cells on which each required range test below is performed. Rational cell endpoints and constants are enclosed by directed outward rounding to finite dyadic endpoints before interval evaluation; an unrepresentable or overflowing conversion cannot validate.
- An initial check target with and .
The certificate is validated only if outward-rounded real-interval evaluation on every supplied cell proves all three radius/tube inequalities, the range inclusion in , that every division denominator in the field and its state derivatives excludes zero on the time-state box , and there. Here each supremum is replaced in the check by the maximum absolute endpoint of a finite outward interval enclosure; the residual expression is evaluated at the actual polynomial , so interpolation, stage, and storage errors already present in that reconstruction are included. Strict inequalities must have a certified positive interval lower endpoint; an inconclusive, nonfinite, unsupported, or failed test is not validation.
This format certifies only rational expression fields and polynomial reconstructions using the stated finite checks. It uses real intervals, not complex rectangles or balls, and does not claim an evaluator for transcendental functions or general library floating-point operations. The page proves the soundness of a validated certificate separately.
The finite DAG and real-interval conventions are those of Real intervals, complex rectangles and ball enclosures and Outward-rounded interval, rectangle and ball operations.
A fixed-mesh global error theorem does not certify an adaptive controller
Scope warning
Global error from uniform one-step defect and stability assumes a prescribed uniform mesh , a one-step defect bound on that mesh, and a stability estimate for propagation on those steps. Its conclusion therefore applies when those hypotheses hold. The controller in Finite-budget adaptive Runge–Kutta controller accepts variable, state-dependent step sizes based on a pair difference. That difference is not the exact one-step defect hypothesis of the fixed-mesh theorem. No uniform mesh, defect reliability estimate, mesh-ratio control, or variable-step propagation theorem is supplied by that theorem. It may be used on a particular adaptive run only after those distinct hypotheses have independently been proved; its fixed-mesh statement alone yields no adaptive global error certificate.
The bounded adaptive Runge–Kutta controller terminates
Statement
For finite-dimensional states and the finite-budget procedure in Finite-budget adaptive Runge–Kutta controller, the controller returns one of success, failure, minimum-step-rejected, or attempt-budget-exhausted after at most trial attempts. Each individual attempt uses finitely many stage evaluations and arithmetic operations.
Facts & Assumptions
Given: A controller input satisfying Finite-budget adaptive Runge–Kutta controller with finite stage count and attempt budget .
Finite-budget adaptive Runge–Kutta controller: the procedure runs attempt indices in order, advances to only after a nonterminal attempt, and returns attempt-budget-exhausted after the th attempt unless an earlier terminal branch applies. Each trial uses the fixed finite tableau stage count and finite state dimension.
Proof
Fix an attempt. Computing its trial size, its stages, its two weighted sums, and the finite-dimensional scaled maximum uses finitely many operations. Any stipulated undefined or nonfinite stage returns failure; an accepted step reaching returns success; and a rejection at the minimum step returns its stated status, in that order before the budget branch. A nonterminal attempt computes its next proposal and advances to the next loop index.
The loop visits only the finite indices , with exactly one trial per visited index. If no earlier terminal branch returns, the th attempt returns attempt-budget-exhausted; in particular, an accepted step reaching on that attempt has already returned success. Thus termination occurs after at most attempts.
Local orders and leading estimator term for the Euler–Heun pair
Statement
Let and let be on an open neighborhood of a compact convex time-state set containing the initial point, the short exact solution segment, and the Euler stage points. Assume the first and second derivatives of are bounded there. For the exact solution starting from , put Here is the time derivative and is the Jacobian in the state variables. The notation means a norm bounded by a constant times for sufficiently small positive , uniformly over the compact starting set when stated. For all sufficiently small , the Euler and Heun one-step values in Euler–Heun embedded Runge–Kutta pair satisfy Moreover, uniformly for , For a family of starting points, assume one common for which all exact segments and stage points stay in the same neighborhood. Under this condition the estimates are uniform over the compact starting set because the derivative bounds are common. Thus Euler has local order one and Heun has local order at least two on that set. If , the embedded norm estimates Euler's defect asymptotically with ratio one; when , that ratio conclusion does not follow from these orders.
Facts & Assumptions
Given: The smooth vector field and starting points in the Statement, and the Euler–Heun formulas in Euler–Heun embedded Runge–Kutta pair.
Euler–Heun embedded Runge–Kutta pair: , , , and .
One-step ODE methods, local defect, uniform order, and step stability: the local defect is one-step value minus the exact next value, and a uniform defect gives local order .
The chain rule for total derivatives: : the derivative of a differentiable composition is the composition of the total derivatives.
Multivariable Taylor formula with a Lagrange remainder along a line segment: for a function on an open convex neighborhood, its degree- Taylor polynomial has a remainder bounded by the st derivatives on the segment times a constant multiple of the segment length to power .
A nonzero leading defect makes the embedded difference asymptotically match the low-order defect: if the low defect has a nonzero coefficient and the high defect is , the difference norm divided by the low defect norm tends to one.
The mean value theorem, as the case of Cauchy's: for continuous on with and differentiable on there is with : Rolle's theorem follows from the mean value theorem on a closed interval; three successive applications give the scalar third-order Taylor remainder with an interior point.
Proof
Define . On the open segment, [F3] gives , which extends continuously to with value . For each component and , the mean value theorem [F6] on shows its secant slope equals for some ; as this tends to . Thus the right derivative of at is , so . Since is , differentiating the displayed formula on the open segment shows is bounded there and extends continuously to the endpoints; hence is bounded on the segment. For a coordinate and , let , set , and put on . Then . Three successive applications of Rolle's theorem [F6] give for some , so . At the remainder is zero. Applying this to and every , and using the common derivative bounds and finite dimension, proves both the endpoint expansion and the uniform-in- expansion in the Statement.
For fixed , the segment from to the Euler stage lies in the compact convex time-state set. Since that set lies in an open neighborhood where is , compactness gives a smaller open convex neighborhood of the segment on which the Taylor theorem [F4] applies. Taylor expansion of each component of there along the increment has linear term and a second-derivative remainder , uniformly by the boundedness assumption. Therefore . Substitution into [F1] gives and .
Subtract the exact expansion in step 1.1 to obtain the two defect formulas and subtract the Euler output from the Heun output to obtain the estimator expansion. These are uniform and defect bounds, so [F2] gives the stated local orders. For , the Euler defect coefficient is and the Heun defect is ; if , [F5] gives the ratio-one conclusion. If , both leading coefficients vanish and [F5] supplies no such inference.
Symbolic derivative recursion for a rational expression DAG is correct
Statement
For a finite rational expression DAG of Finite rational residual-tube certificate for an ODE trajectory, at every input point where each division denominator is nonzero, the DAG evaluates to a continuously differentiable function of time and state. The recursion assigning zero derivatives to constants, coordinate derivatives to inputs, sum/difference rules, the product rule, and for a division node computes its actual total derivative. On any open neighborhood where all denominators stay nonzero, the represented field is locally Lipschitz.
Facts & Assumptions
Given: The finite acyclic rational expression DAG and an input point where all division denominators are nonzero.
Finite rational residual-tube certificate for an ODE trajectory: the only DAG operations are constants, input coordinates, addition, subtraction, multiplication, and division.
Chain sum product and composition rules for Banach derivatives: sums and bounded-bilinear products of Fréchet-differentiable maps obey the corresponding derivative rules; [F6] gives the same first-order remainder convention for the total derivatives used here.
The chain rule for total derivatives: : derivatives of differentiable compositions are obtained by composing their total derivatives.
The mean value theorem, as the case of Cauchy's: for continuous on with and differentiable on there is with : a scalar differentiable function with derivative bounded by on an interval is -Lipschitz there.
Cauchy-Schwarz with its equality case, the triangle inequality for , the parallelogram law and polarisation: and finite-dimensional Euclidean norms obey the triangle inequality.
The total (Fréchet) derivative as the linear first-order approximation with remainder: total differentiability gives the expansion .
Proof
Order the finite acyclic graph topologically. A constant node defines a constant smooth function with derivative zero; an input node is a coordinate projection with its coordinate derivative. Assume inductively that the parent nodes define functions with their assigned derivatives.
For an addition or subtraction node, [F2] gives the sum or difference of the parent derivatives. For a product node, apply its bounded-bilinear product rule to real multiplication, which is bounded by , to obtain . These derivatives are continuous because the parent values and derivatives are continuous.
At a division node write , , , , and , , where by [F6]. Continuity of keeps near . Put and . Direct algebra gives . Here , , and , while the denominator stays bounded away from zero. Thus the right side is , so the quotient derivative is . Its formula is continuous wherever .
Induction through the topological order, using steps 2.1–2.2, proves that every node is with its recursively assigned derivative, so the root derivative is correct. Continuity and nonvanishing of the finitely many denominator functions give a ball around the input on which all denominators stay nonzero. Shrink it so every partial derivative of every root component is bounded in absolute value by a common finite , using continuity at the center and the finite number of entries. For two points in this convex ball, apply [F4] to each scalar component along : its derivative has magnitude at most by [F5]. Combining the finitely many component bounds gives a Lipschitz constant for the root map. Thus the field is locally Lipschitz.
Heun's quadratic dense output has local order two
Statement
Under the smoothness and bounded-derivative hypotheses of Local orders and leading estimator term for the Euler–Heun pair, for a fixed initial value and all sufficiently small , for a constant independent of and . Thus this continuous extension has local order two uniformly throughout the accepted step, with a defect separate from the endpoint defect.
Facts & Assumptions
Given: The Heun stage and dense-output formulas, the smooth vector field and bounded derivatives from Local orders and leading estimator term for the Euler–Heun pair, and .
Local orders and leading estimator term for the Euler–Heun pair: uniformly for , and . Together with [F1], the latter gives .
Proof
From [F1] and [F2], ; since , division by gives . Substituting this into the defining formula for in [F1], and using , gives uniformly in .
The uniform exact-path expansion in [F2] has the same first two terms as step 1.1, with an remainder independent of . Subtracting it from the expansion of proves the asserted uniform estimate.
Finite checker for rational residual-tube certificates
Definition
Input a finite rational certificate of Finite rational residual-tube certificate for an ODE trajectory, an outward-rounded real interval format, and the matching operation evaluator of Outward-rounded interval, rectangle and ball operations. Return either certified or inconclusive by this finite procedure:
- Parse and structurally check the rational field DAG, finite mesh, panel polynomials, state boxes, radius polynomials, rational bounds, and subdivisions. Reject malformed syntax, noncanonical/nonfinite numbers, gaps, nontrivial interior overlaps, endpoint mismatches, or a non-acyclic graph as
inconclusive. - In topological order, construct the formal time/state derivative DAG for each field output by Symbolic derivative recursion for a rational expression DAG is correct. If any recursion node is unsupported, return
inconclusive. - Convert each exact rational cell endpoint and constant to a directed outward dyadic interval. On each supplied time cell and panel box, evaluate the field, derivative DAG, reconstruction, its derivative, radius and strict-margin expressions using only outward-rounded real interval addition, subtraction, multiplication, division, and rational constants. If any operation returns
split-domain,entire,domain-error,overflow, orinconclusive, returninconclusive. - Check exactly that the time cells cover each panel and that neighboring reconstruction/radius endpoints agree; verify the initial squared-error inequality separately. From interval endpoints check: each radius and each strict supersolution margin has strictly positive lower endpoint; the componentwise reconstruction-plus-radius boxes lie inside ; the residual component intervals satisfy the displayed squared-norm bound by ; all field and derivative denominator intervals exclude zero; and the squared Frobenius bound on the state Jacobian is at most . Check the initial squared error bound and strict comparison by exact rational arithmetic.
- Return
certifiedonly when every check passes. Any failed inclusion or comparison returnsinconclusivewith the first failed check identifier. No automatic subdivision, transcendental evaluation, complex rectangle operation, or ball operation is performed.
The finite interval evaluator and its DAG interpretation are those of Outward-rounded interval, rectangle and ball operations and Outward-rounded operations are inclusion-isotone and enclose DAG evaluations. A separate theorem proves soundness of every certified result.
A validated rational residual-tube certificate encloses an exact ODE solution
Statement
If Finite checker for rational residual-tube certificates returns certified on a finite rational residual-tube certificate for the rational ODE field and initial value , then the IVP has a unique exact solution on the entire interval . On every panel,
where , , and are the certified reconstruction, positive radius, and state box. The residual is evaluated from the stored polynomial itself, so any interpolation, stage, or storage error already present in those coefficients is included.
Facts & Assumptions
Given: A finite rational certificate and a certified return from the checker in Finite checker for rational residual-tube certificates.
Finite rational residual-tube certificate for an ODE trajectory: a certificate stores exact rational panels, polynomial reconstructions, boxes, radius functions, residual envelopes, and strict supersolution bounds.
Outward-rounded operations are inclusion-isotone and enclose DAG evaluations: every finite interval DAG enclosure contains each exact value assigned to its nodes; nonfinite statuses assert no finite enclosure.
Symbolic derivative recursion for a rational expression DAG is correct: the rational field DAG is where its divisions are nonzero, its formal derivatives are correct, and it is locally Lipschitz there.
Choice-free residual error bound for piecewise-C1 ODE reconstructions: for a piecewise- reconstruction, piecewise-continuous one-sided Lipschitz coefficient , and residual bound , the exact solution error is at most its integrating-factor residual bound.
A maximal ODE solution cannot remain in a compact tube to a finite endpoint: a maximal solution cannot end at a finite right endpoint while its graph remains in a compact subset of the open ODE domain.
The mean value theorem, as the case of Cauchy's: for continuous on with and differentiable on there is with : the scalar mean value theorem bounds increments from a derivative bound.
Cauchy-Schwarz with its equality case, the triangle inequality for , the parallelogram law and polarisation: the Euclidean inner product obeys Cauchy–Schwarz.
Every Picard–Lindelöf initial value problem has one maximal solution on an open interval: a locally Lipschitz IVP has a unique maximal solution through its initial data.
Heine-Borel in : with the Euclidean metric a subset of is compact if and only if it is closed and bounded, and the proof by bisection uses no choice principle; the same holds on the real line: a closed bounded box in finite-dimensional Euclidean space is compact.
The second fundamental theorem: if is differentiable on with and is integrable, then : for a function on a closed interval, with one-sided endpoint derivatives, integrating its continuous derivative recovers the endpoint increment.
The exponential function is smooth and and The exponential is positive and satisfies : the exponential is positive and its derivative is itself.
The Euclidean inner product on : the Euclidean inner product is bilinear, and .
Squaring is monotone on the nonnegatives: for nonnegative , implies .
Proof
A certified return means each interval operation was finite and every listed inclusion and strict inequality passed. By [F2], all exact rational-DAG values and their derivative-DAG values lie in the checked intervals. Thus on each panel is defined on . The residual interval tests bound each component's absolute value by its checked supremum, whose squared sum is at most ; [F12] and [F13] give . Define ; the Jacobian interval tests bound this sum by , so [F13] gives . The checker also proves . Its exact initial squared comparison and [F12]–[F13] give . For each coordinate, , so [F13] places in . Hence lies in the checked open ODE domain.
Fix and define for . The segment stays in by convexity. By [F3] and bilinearity in [F12], . The bound in step 1.1 and rowwise Cauchy–Schwarz give , and [F7] then gives . [F6] on yields . Thus the one-sided Lipschitz hypothesis in [F4] holds with whenever the exact and reconstructed states lie in the certified box.
Picard–Lindelöf applies locally by [F3], and [F8] gives a unique maximal solution through . On any interval where it exists and lies in the checked panel boxes, apply [F4] panel by panel. Write , which is strictly positive by the checker. Integrating the scalar identity with the same integrating factor shows that the radius dominates the error bound strictly: the initial gap is positive because , and each panel adds the positive integral of , using positivity of the exponential [F11] and the fundamental theorem [F10]. For , each coordinate satisfies , so [F13] gives ; hence implies . The comparison therefore applies up to any first exit and gives a strict radius bound there, ruling out that exit. At each panel endpoint the stored reconstructions and radii agree, so the strict inequality continues across the finite partition.
If the maximal solution ended before or at , the no-first-exit conclusion in step 3.1 would keep its graph inside the finite union of the closed bounded boxes , which is compact by [F9] and lies in the rational field's open domain. All divisions stay away from zero there by step 1.1. This contradicts [F5], so the maximal solution reaches . Applying the panelwise error estimate on the whole interval gives and hence for every panel time. Uniqueness follows from local Lipschitz continuity in [F3] and the local uniqueness clause of Picard–Lindelöf.
The rational residual-tube certificate checker terminates
Statement
For every finite input record, Finite checker for rational residual-tube certificates returns certified or inconclusive after finitely many operations. It performs no unbounded subdivision or search.
Facts & Assumptions
Given: A finite certificate record and the finite checker procedure in Finite checker for rational residual-tube certificates.
Finite checker for rational residual-tube certificates: all loops traverse supplied finite arrays, a finite acyclic DAG, finite panels and finite supplied subdivisions; all arithmetic operations are the finite interval operations of Outward-rounded interval, rectangle and ball operations.
Proof
Structural validation traverses finite input arrays and the finite graph. A topological traversal visits each acyclic node finitely often, and the derivative recursion creates a fixed finite number of derivative nodes per source node and coordinate. Therefore the syntax and derivative phases terminate.
The numerical phase visits each of finitely many panels and cells and executes a fixed finite list of interval operations per field, reconstruction, derivative, and margin expression. Each interval operation returns either a finite interval or one of its specified statuses in finitely many endpoint operations. Every comparison is rational and finite. The procedure therefore reaches a passing or failed check and returns one of its two statuses.
5 · Examples, counterexamples and false statements
None yet.
Sources
- Gerald Teschl, Ordinary Differential Equations and Dynamical Systems, Chapter 2
- Jiri Lebl, Basic Analysis I, Section 6.3
- Donald Estep, A Posteriori Error Bounds and Global Error Control for Approximation of Ordinary Differential Equations, SIAM Journal on Numerical Analysis 32 (1995), 1–48
- Ernst Hairer, course notes, Chapter III: Équations Différentielles Ordinaires
- Tobin A. Driscoll and Richard J. Braun, Fundamentals of Numerical Computation, Chapter 6, Adaptive Runge–Kutta
- Donald Estep, A Posteriori Error Bounds and Global Error Control for Approximation of Ordinary Differential Equations, SIAM Journal on Numerical Analysis 32 (1995)
- Ernst Hairer, course notes, Chapter III: Équations Différentielles Ordinaires, §III.2
- Tobin A. Driscoll and Richard J. Braun, Fundamentals of Numerical Computation, Chapter 6
- Ernst Hairer, course notes, Chapter III: Équations Différentielles Ordinaires, §§III.2–III.4
- Ernst Hairer, course notes, Chapter III: Équations Différentielles Ordinaires, Exercise 10 (Dense output), printed p. 85
- Ernst Hairer, Ordinary Differential Equations, lecture notes, Exercise 10
- Walter Rudin, Principles of Mathematical Analysis, 3rd ed., Chapter 9
- R. Baker Kearfott, Interval Computations: Introduction, Uses, and Resources, §1
- S. M. Rump, Verification methods: Rigorous results using floating-point arithmetic, §§5.1–5.5